Microsoft logo on the corner of a building

Windows Defender to root out dodgy registry cleaners and system optimization tools

Microsoft is taking a firmer line with misleading system utilities and tools that try to scare users into paying for software. An update to Windows Defender means that software found to be "coercive" could be ripe for automatic removal.

New policies come into play in March as Microsoft tries to banish software that makes misleading claims or adversely affects system performance. Tools that exaggerate problems or resort to scare tactics are among those in the firing line.

By Sofia Elizabella Wyciślik-Wilson -
api

DDoS threats and bot attacks are biggest threats to API security

APIs power many of our digital experiences, but because they provide a window into applications they also present a security risk.

A new study from cyber security company Imperva reveals that 69 percent of companies have public-facing APIs which offer a route to the sensitive data behind applications.

By Ian Barker -
5G network

Trump administration wants to nationalize 5G, but the FCC is not impressed

Leaked documents show that the Trump administration is considering plans to nationalize the 5G network. In the documents, seen by Axios, a senior National Security Council official says that a centralized, government-controlled 5G network is needed to offer security against China.

But while the government may believe it makes sense for it to be in control of the future mobile network, the idea has attracted vocal opposition. Among the opponents is FCC chairman Ajit Pai.

By Sofia Elizabella Wyciślik-Wilson -
Fingerprint on a chip

Security warning: Lenovo Fingerprint Manager Pro has a hardcoded password backdoor

If you have a ThinkPad, ThinkCentre or ThinkStation system, Lenovo has an important security patch for you to install. And you should install it right now.

Reporting vulnerability CVE-2017-3762, the computer manufacturer says that it discovered a weak algorithm used to encode fingerprint data could be bypassed with a hardcoded password. The problem affects the Lenovo Fingerprint Manager Pro utility for Windows 7, 8 and 8.1.

By Sofia Elizabella Wyciślik-Wilson -
security flaw

New solution delivers universal threat intelligence

Threat intelligence is becoming an essential part of protecting systems. But this information often comes from many different sources, making it hard to see the big picture and limiting flexibility and effectiveness.

To address this issue, Recorded Future is launching a new product providing centralization, collaboration, and customization of intelligence. Called Fusion, it's powered by machine learning and allows users to centralize and customize proprietary and internal threat data with external threat intelligence.

By Ian Barker -
Strava fitness app heatmap

Strava says military users should opt out of heatmap feature to avoid revealing secret army base locations

Military personal who used the fitness app Strava have unwittingly contributed to revealing the location of secret army bases around the world. Strava published a "heatmap" of global user activity in November, and from this data visualization the location of secret military bases was accidentally exposed.

The company argues that the information had already been made public by users who chose to share their location data. It goes on to suggest that military users might want to consider opting out of the heatmap feature of the iOS and Android app.

By Sofia Elizabella Wyciślik-Wilson -
Intel processor

Intel will release chips free from Meltdown and Spectre bugs this year

The discovery of the Meltdown and Spectre vulnerabilities in processors caused a great deal of panic and confusion. The poor reliability and performance hit brought about by patches did little to help consumer confidence, but Intel says it will be releasing processors in 2018 that are free from the problems.

The move will be welcomed by customers who have been frustrated by problematic bug fixes designed to mitigate against the bug but which brought issues of their own. A timescale for the hardware solution has not been pinned down more specifically than "later this year."

By Sofia Elizabella Wyciślik-Wilson -
Data privacy

Corporations seen as a bigger threat to data privacy than cyber criminals

Ahead of this Sunday's (January 28) Data Privacy Day, enterprise cyber security company Tripwire has conducted a poll of Twitter users asking who they were most concerned about collecting their private information.

Of the more than 300 people who took part, 40 percent say they would be most worried about corporations stealing their information. While nearly a third (27 percent) say they are most concerned about the government gathering their critical data.

By Ian Barker -
data threat

Data threats are the new reality as organizations embrace transformative technologies

With 99 percent of organizations using big data, 94 percent Internet of Things devices, and 91 percent using or working on mobile payments, there are more attack surfaces than ever and new risks that need to be addressed.

A new study from systems and cyber security company Thales e-Security finds the extent and impact of increased threats clearly shown in levels of data breaches and vulnerability.

By Ian Barker -
Ransomware sign

Record ransomware volumes seen in 2017

The latest annual State of Malware Report from Malwarebytes shows that ransomware had a bumper year in 2017, though it began to trend downwards towards the end of the year.

Ransomware launched against consumers was up more than 93 percent and ransomware against businesses up 90 percent. As the year end approached though many avenues known for ransomware drops were seen diversifying their payloads with banking Trojans and cryptocurrency miners instead.

By Ian Barker -
Bitcoin mobile

Official app stores targeted by malicious Bitcoin apps

With increasing interest in cryptocurrency it's inevitable that cyber criminals will see the potential to make money from investors and users.

Threat management company RiskIQ has found that hackers are targeting the Apple, Google Play, SameAPK, APKPlz and other app store users with malicious cryptocurrency apps aiming to steal money and personal data.

By Ian Barker -
finger_of_blame

Organizations blame their own staff for cloud security incidents

When systems are in the cloud, 45 percent of organizations perceive their own employees to be the biggest security risk, according to a new report.

According to user behavior specialist Netwrix, even though the majority of attacks they experienced over the year were external, organizations blame their own IT staff (39 percent) and business users (33 percent) as much as or more than their cloud providers (33 percent).

By Ian Barker -
World map with code

State-sponsored attacks expected to dominate 2018 threat landscape

With 1.9 billion records stolen in the first six months, more than in the whole of 2016, 2017 proved a bumper year for cyber crime.

According to cyber security company Venafi, this trend is set to continue into 2018, with state-sponsored attacks to the fore.

By Ian Barker -
risk jigsaw piece

Businesses need a risk-based approach to tackle vulnerabilities like Meltdown

The recent Spectre and Meltdown vulnerabilities have been well documented, but for businesses it can be difficult to know which fixes to prioritize.

Software management and security specialist Flexera is announcing a set of recommendations to provide a standardized, risk-based approach to managing this type of vulnerability.

By Ian Barker -
Intel logo

Intel tells customers to stop installing Meltdown/Spectre patches due to 'unpredictable' reboot issues

The fallout from the Meltdown and Spectre bugs continues to plague Intel. The company has been hit with lawsuits, users complained about performance drops, and some users found that their computers were rendered unbootable. For people with Broadwell and Haswell chips, there was a problem with random reboots, and as a result of this -- some two weeks down the line -- Intel is now advising people to stop installing its patches.

Executive vice president Navin Shenoy says that the company is close to determining the root cause of the problem, apologized for reboots and "unpredictable system behaviour," and warns that customers should stop deploying the current version of the patches until an update is produced.

By Sofia Elizabella Wyciślik-Wilson -
Load More Articles